Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e203432383331.roa
File: 37372e38332e3235342e302f32342d3234203d3e203432383331.roa (raw, json)
Hash identifier: 0CLZULPRiooqjqfk64uubyCNdstUfsqHsT0xhS/Q15A=
Subject key identifier: DE:19:FC:63:C6:5E:4E:17:49:87:52:75:E7:32:D9:F3:C7:AB:79:46
Certificate issuer: /CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Certificate serial: 02DA8D778FE96EC1701B76DA14DD14C61644FA72
Authority key identifier: 8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e203432383331.roa
Signing time: Mon 05 Oct 2026 16:49:35 +0000
ROA not before: Mon 05 Oct 2026 16:44:35 +0000
ROA not after: Mon 04 Oct 2027 16:49:35 +0000
asID: 42831
IP address blocks: 77.83.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.mft
rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 17:06:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:da:8d:77:8f:e9:6e:c1:70:1b:76:da:14:dd:14:c6:16:44:fa:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f4ce7722f99075d94738b7e61070401269eb3d6
Validity
Not Before: Oct 5 16:44:35 2026 GMT
Not After : Oct 4 16:49:35 2027 GMT
Subject: CN=DE19FC63C65E4E1749875275E732D9F3C7AB7946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:95:d5:39:e8:a9:14:0f:51:a8:4a:17:7a:43:
de:80:3b:0e:46:2a:57:17:7c:d1:ce:fe:6b:7f:96:
38:76:1c:3c:0c:96:6f:28:c9:d4:cc:1e:18:12:d8:
1a:be:e6:e9:8b:84:5e:06:9d:54:ca:04:9e:5a:3d:
23:8e:5d:4e:c0:ea:82:99:6a:d3:ea:81:65:be:55:
96:92:ee:0f:de:28:03:83:62:dd:82:2a:ed:be:1d:
de:8c:d0:15:66:00:71:7b:3c:11:42:32:61:5a:45:
bd:3f:d7:92:06:b8:7c:4e:ba:7c:52:6b:ae:d8:1b:
ea:9a:84:c8:76:ff:d7:ba:de:2a:03:6a:46:93:ec:
8d:0e:7a:3f:d5:3f:86:1e:ba:b4:4f:12:2b:74:0f:
d6:d6:e9:75:0c:a0:7c:48:f3:77:83:d1:1f:9d:35:
ab:0e:b0:7d:17:6b:b5:a4:62:f1:e3:b3:c6:76:17:
78:9b:5c:e0:59:7b:53:5d:b5:6d:91:15:f5:f6:bc:
8e:98:f6:f7:82:e6:be:17:09:56:b9:1a:48:31:25:
d8:8c:e3:4b:61:6b:74:45:7e:a1:74:82:d9:0d:dc:
12:ff:78:a7:c7:1d:12:10:d0:e9:c6:51:ae:11:08:
eb:69:cb:d0:27:8f:e7:8a:b7:42:be:e1:32:a7:f0:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:19:FC:63:C6:5E:4E:17:49:87:52:75:E7:32:D9:F3:C7:AB:79:46
X509v3 Authority Key Identifier:
keyid:8F:4C:E7:72:2F:99:07:5D:94:73:8B:7E:61:07:04:01:26:9E:B3:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/8F4CE7722F99075D94738B7E61070401269EB3D6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0znci-ZB12Uc4t-YQcEASaes9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa977115-5110-4257-94ef-4d2b43884040/0/37372e38332e3235342e302f32342d3234203d3e203432383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.254.0/24
Signature Algorithm: sha256WithRSAEncryption
22:7f:7c:7a:d9:17:d1:44:f5:46:da:18:d5:8f:ad:aa:7b:60:
4a:88:3c:2e:63:78:1d:9c:bc:aa:a8:db:1f:ae:10:c9:8f:78:
23:94:d2:5d:79:20:9a:6b:22:49:03:2d:6c:6f:65:fa:52:71:
fd:af:96:a9:64:39:9f:54:55:3a:73:e2:cc:da:44:1b:fe:b4:
57:92:b2:db:ff:09:af:48:08:97:ba:c1:fe:c8:38:64:c0:65:
ea:ca:2b:8b:c0:a3:a3:af:1e:c5:ae:05:cb:c6:d4:48:8d:5d:
ab:32:2f:cd:25:ad:81:06:60:88:14:55:6f:5b:03:ee:0f:53:
36:c6:e2:20:ef:ae:c7:83:84:42:6e:62:f7:46:c4:b9:50:3e:
fc:68:fd:6d:87:8c:0b:b8:51:d9:89:93:2c:dc:76:20:46:51:
52:0d:fb:62:67:c7:cf:c3:bf:5f:60:43:d2:12:37:9e:48:58:
49:a2:ee:97:85:41:ff:85:b4:58:08:46:2f:bc:46:59:a1:cb:
4f:75:8e:7a:e3:e1:29:b9:1d:12:73:fc:83:df:f6:65:d1:a9:
f0:56:4a:fa:c8:82:5e:f1:89:2e:6b:01:98:9e:70:5a:f7:57:
94:c6:6b:9c:8b:84:51:83:ab:f9:c0:f8:5b:03:01:3f:5f:73:
d2:93:54:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:52:19 2026 by rpki-client